ada id arsip..
Friday, November 23, 2007, 1:31:52 AM, balthaZor wrote:
yup, kena virus jenis .VBS
dari sample yang pernah gw dapet, dia gak ngerusak dokumen
dan gak mendisable apapun.
misi utamanya cuma modif window title Internet Explorer
dgn kata² menghujat Israhell & US.
cara bersihinnya:
1. buka task manager, lalu end task "wscript.exe" process
2. run: cmd
lalu ketik perintah ini:
attrib -h -s -r %systemroot%\Win32.dll.vbs
del %systemroot%\Win32.dll.vbs
3. Ulangi perintah spt no.2 utk semua root drive
termasuk flashdisk, contoh:
attrib -h -s -r X:\Win32.dll.vbs
del X:\Win32.dll.vbs
attrib -h -s -r X:\autorun.inf
del X:\autorun.inf
catatan:
- ganti X: dgn drive di PC Anda.
- sewaktu AKAN nancepin flashdisk, tekan & tahan
tombol [Shift] spy autorun-nya tidak jalan.
4. run: regedit
buka
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run"
hapus string "mcafee" yang manggil file "Win32.dll.vbs"
buka
"HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main"
hapus string "Window Title" yang berisi kata² hujatan.
buka
"HKEY_CURRENT_USER\vbsfile\DefaultIcon"
dobel klik default string-nya, ganti value data "shell32.dll,2"
jadi "%SystemRoot%\System32\WScript.exe,2" tanpa tanda kutip.
salam^^
balthazor[at]oprekpc.com
||||||||||||||||||||||||original message|||||||||||||||||||||||||>
Subject: [PCplus] Apaan sech itu dibelakang Caption ie7 gw ?!?!....
Saturday, February 9, 2008, 12:14:49 AM,
"Fitra" <[EMAIL PROTECTED]> wrote:
> dear all,
> gw ada masalah nech ma ie7 gw. ada yg aneh ma caption ie7 gw.
> ada semacem text tambahan di belakang caption yg bunyinya :
> Caption - "Fuck USA & EZRAEL! [Can Dajjal Come Out And Play ?!]"
> text itu ada trus, apaan sech itu? virus? spyware ? dsb?
> gmn cara buat ngilanginnya? pa diinstal ulang aja ie7 nya?
> Oiya....klo mo nginstal windows component di vista dimana yak? gw cari2
> koq ga da, klo di XP kan pas di add/remove program tuch. klo di vista dmn?
> btw gw pake vista home premium.
> thank for saran & solusinya yak!
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/mailplus/
<*> Your email settings:
Individual Email | Traditional
<*> To change settings online go to:
http://groups.yahoo.com/group/mailplus/join
(Yahoo! ID required)
<*> To change settings via email:
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
